Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File:                     ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier:          BZvK5L/IqYB57ZqM3M6b3RS8iLRh7LJDBqErBB0KiTA=
Subject key identifier:   0B:E9:5E:6D:86:75:91:95:B6:49:4A:AB:63:D3:DE:42:E4:CF:DE:39
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer:       /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial:       01962FAB20A39171FDB6E7E1407B231430F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: Pl-xLYhjY5YlhNM49xs9QKMtfBU.roa (hash: UmyMwMyNw8j81M3/HKdHg6H50eTkm3sFnC7O9PysISQ=)
                          2: Smd34xeFUEeunOCrNaNvyPItMW4.roa (hash: tLjLkBtCoEO7JoIBI3BKAYDHLRl3QBXXfkRn3x13Z0I=)
                          3: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: 5vxwpcJQXO5RB58MtUDZFhylsATvNcQvnpc0o/2JCbo=)
                          4: iI9-w7tHXxNtTl_I4COghj0uNew.roa (hash: b/PEDW5ud97u67vxZ3rzQUfyJtK+SNRKCKr9PKh3cqQ=)
                          5: lhglnPlBsqTneV2iOyN5hamIleM.roa (hash: p/WirEa6li0LQEWmE00BvcWGXDEwDU4D0iWnnIs2QNM=)
                          6: tSkgtw28-Km5F0YiHIf1O1pkoXI.roa (hash: 0ECcSRlX4TniqxVIh1N6rLlLbSyp1biqLJH1F5jVobk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:20:a3:91:71:fd:b6:e7:e1:40:7b:23:14:30:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=0be95e6d86759195b6494aab63d3de42e4cfde39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:8c:b1:70:2b:1d:6d:ec:b6:a3:8a:24:4e:
                    76:05:43:50:25:1c:8c:13:87:51:23:91:38:73:98:
                    de:bf:11:a4:9e:49:5d:52:e4:f9:b4:01:9a:9d:9d:
                    bb:44:55:14:2d:a1:42:eb:4a:97:19:e9:61:2a:a6:
                    11:bd:67:63:98:ca:8b:0b:4e:05:1e:ea:17:6e:b6:
                    49:e9:46:da:0d:2b:4e:7d:73:c0:8f:7e:a7:bb:3f:
                    85:00:1b:3b:22:02:0a:e9:4f:c1:2d:01:47:c0:50:
                    9d:f0:d5:5d:06:e3:e7:c7:00:11:ce:a0:bf:82:b9:
                    d4:11:f6:c2:2e:8d:28:11:80:a0:cf:19:3c:a8:4d:
                    78:77:06:c1:25:32:06:d5:01:7a:5c:46:59:48:01:
                    d6:9d:dd:17:bc:5c:8c:17:02:23:a2:31:7a:2c:b0:
                    f6:54:57:f5:6f:b1:74:37:61:a1:99:0c:1e:ac:89:
                    1f:77:ea:8c:30:ce:57:32:cd:72:21:a4:e0:68:1a:
                    07:6b:bf:f2:ec:24:af:98:b5:e2:23:c4:b1:df:7f:
                    47:53:ea:06:36:fa:0d:b3:b1:fe:d7:86:00:78:e3:
                    c7:d0:16:f6:18:83:46:82:c9:6c:a6:92:01:46:74:
                    52:c0:d5:52:1d:37:fd:65:93:a6:24:28:2c:14:c0:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E9:5E:6D:86:75:91:95:B6:49:4A:AB:63:D3:DE:42:E4:CF:DE:39
            X509v3 Authority Key Identifier:
                keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:80:a8:5e:de:49:c8:83:32:cb:c8:9e:ae:e1:d9:9d:2e:a2:
         79:85:e1:73:e4:a9:40:51:d5:8b:0e:e7:5b:8e:dc:e3:e6:0b:
         67:4d:41:9f:46:61:ee:7b:24:7d:7b:c2:df:83:9a:e4:c0:b2:
         95:54:d3:f1:96:89:4b:e7:3b:25:78:1a:66:de:1f:0d:42:5b:
         9c:af:1a:b1:4e:93:e5:9f:7c:57:39:33:11:ed:5d:fb:07:01:
         14:09:ae:72:01:1b:de:44:62:0d:63:22:3e:9d:6c:3d:5f:81:
         05:75:23:fc:b4:b7:1f:1a:cf:5e:61:6e:c7:09:45:9f:f9:44:
         7c:bc:9b:17:97:86:68:41:96:6b:1f:0f:fb:6b:70:21:fb:13:
         31:ab:ab:b0:95:d4:c9:62:64:d3:72:9c:80:cb:4c:08:38:11:
         0b:62:71:9d:fa:64:4c:c6:87:c2:af:3d:ce:77:59:05:47:63:
         f1:9f:ac:83:b2:8c:b5:60:b0:8f:a1:67:66:8f:08:38:0c:34:
         1b:ed:62:cc:12:45:92:4d:a5:99:04:d0:83:ed:d4:be:0d:32:
         c7:be:39:81:c3:77:ab:77:47:29:53:95:b9:4d:8b:4b:0a:77:
         97:6c:4f:5c:5e:25:f3:43:9a:e0:72:86:c1:05:0e:58:64:d4:
         8d:5c:81:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----